If you want to pay for a supported Java, with long term ongoing patches: call a commercial vendor of Java such as Oracle, Azul Systems, etc.

If you want a free and open source Java runtime, use Open JDK. Some sources of OpenJDK pledge to backport bug fixes from newer versions for some number of years. Or you can simply make sure your product continues to run on newer versions -- which for Java, according to history, has been easy to do.

Where to get Open JDK:

Adopt Open JDK https://adoptopenjdk.net/ https://github.com/AdoptOpenJDK

https://github.com/ojdkbuild/ojdkbuild

Open JDK http://openjdk.java.net/

Azul Systems Zulu http://www.azul.com/downloads/zulu/

Amazon https://aws.amazon.com/fr/corretto/ https://github.com/corretto

Eclipse https://www.eclipse.org/openj9/ https://adoptopenjdk.net/releases.html?variant=openjdk11&jvm... https://github.com/eclipse/openj9

Red Hat https://developers.redhat.com/products/openjdk/download/ https://access.redhat.com/articles/1299013

SAP https://github.com/SAP/SapMachine

BellSoft https://bell-sw.com/java.html

Oracle JDK -- supported for a limited time unless you pay https://jdk.java.net/11/ Oracle Binary License Agreement - DANGER Will Robinson! http://java.oracle.com/

See:

Time to look beyond Oracle's JDK https://blog.joda.org/2018/09/time-to-look-beyond-oracles-jd...

Java is Still Free 2.0.0 https://medium.com/@javachampions/java-is-still-free-2-0-0-6...